Tuesday Lightning Talks 2
summary
Proposes a concrete privacy engineering paradigm that defines privacy = consistency of informational behaviors with reasonable expectations and embeds it in a requirements→model→design→verification lifecycle that extracts and documents user expectations. Describes an open-source 2FA Notifier extension (Chrome/Firefox, ~200 users) that detects supported sites, links to setup docs, collects no analytics and plans lab and browser-partner experiments. Reports a mobile keystroke study where 70% of rejected logins are single-character typos, flight-time model performs poorly but shows consistent rhythm and special‑character pauses. Argues don't build for "trust"; measure safety, perceived risk, adoption, or values instead.
AI-written summary · about
chapters (6)
- 0:00Introduction
- 0:10Defining privacy for engineers
- 5:57Two-factor auth notifier
- 10:33Password typo tolerance
- 15:59Critique of trust in tech
- 20:38Closing
related talks
25mImproving Safety with Privacy: An Exploration of Privacy...
43mReflecting on Twenty Years of Usable Privacy and Security
44mA Taste of Privacy Threat Modeling
14mGloom, Doom, and the Internet
52mPrivacy & Security, Policy & Technology
05mLightning Talk from Geri Jennings
17mLightning Talks - Day 1
28mSecurity Through Design - Making Security Better By Designing for People